Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c39428f5-a570-31b9-ae41-45fd8168f071.roa
File:                     c39428f5-a570-31b9-ae41-45fd8168f071.roa (raw, json)
Hash identifier:          jIvEHy0ni/o3bsL10JNQzKQFNFhqooU5jIImEL8LHys=
Subject key identifier:   41:D5:36:28:67:90:DC:40:01:42:84:D1:1A:F5:45:F4:54:4F:96:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411CE70931A7396B591DDC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c39428f5-a570-31b9-ae41-45fd8168f071.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.105.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ce:70:93:1a:73:96:b5:91:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7848a107-58a1-46f0-8942-68d6860d0188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:ce:1f:a9:d0:9e:d3:66:dd:a3:b8:99:b7:
                    57:12:4f:42:97:3e:7d:88:5f:fb:81:79:b5:dc:56:
                    b3:5b:16:a9:d6:0f:a3:c2:e4:31:fb:72:40:9f:20:
                    f4:7b:d0:24:f0:a8:c6:b1:60:d0:7f:1a:f5:f8:c7:
                    78:62:2b:a1:90:f8:46:57:78:c1:ec:fa:d7:98:d8:
                    26:32:1f:3d:b7:ed:d5:bb:aa:35:eb:43:63:c6:b1:
                    0e:2e:25:a0:1b:c6:5c:e7:94:76:3a:98:0e:40:4c:
                    24:c8:30:19:29:c7:be:46:5e:37:32:b7:74:8a:4f:
                    62:15:c2:e1:01:01:1f:60:92:78:3c:4b:bf:2a:49:
                    1b:f8:ca:ee:97:96:2a:2f:65:71:fa:6a:07:75:b3:
                    9d:0c:53:94:dd:01:97:3f:9c:94:ab:9f:60:23:83:
                    d5:c1:38:21:9e:67:a7:1f:f7:a2:6c:c3:b6:13:ad:
                    14:5d:d9:f4:1b:3c:08:0f:f0:71:c0:66:12:7d:36:
                    43:39:29:87:88:1a:2b:7d:a5:e9:4b:fe:3c:0b:ff:
                    fa:f3:44:28:2a:c0:bb:eb:9c:b1:0a:d1:4e:94:7e:
                    10:a3:17:ba:cf:ea:cc:e9:0d:98:63:a8:7a:e0:5d:
                    dc:7b:77:ae:3d:3b:03:d6:5a:ad:02:0a:33:29:c0:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:36:28:67:90:DC:40:01:42:84:D1:1A:F5:45:F4:54:4F:96:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c39428f5-a570-31b9-ae41-45fd8168f071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:a3:89:63:97:3b:40:d3:21:15:22:de:13:42:27:a4:e9:c7:
         58:20:fc:c0:50:1b:6c:7c:b2:29:dc:d0:75:fc:92:2b:91:f5:
         81:6c:a6:84:12:02:aa:7c:ac:7b:88:19:63:ac:24:f6:c1:8e:
         22:df:c7:3a:5d:25:40:43:a4:0d:5f:24:1c:2a:29:aa:ce:f3:
         a8:a2:b6:9c:8e:a9:16:3b:7a:10:28:49:68:51:5e:ae:99:05:
         91:86:8d:1c:9b:a5:4f:8b:69:89:30:6b:2f:41:71:ce:b1:08:
         a2:f0:6b:8e:67:2d:d2:04:97:2f:a0:07:e7:03:6a:44:63:c2:
         dd:0c:01:7b:e8:83:7f:8f:d3:e7:37:f2:6b:57:91:77:46:80:
         26:76:15:81:1d:d1:64:06:a8:f5:48:f7:97:1f:81:68:1f:58:
         21:5f:a8:0f:ea:13:39:cf:4a:ec:20:f3:ff:99:b0:ca:4a:9e:
         71:73:2e:b0:62:58:6a:56:f5:86:cc:e2:c9:20:23:29:f4:50:
         b3:b8:74:41:e7:a5:b9:a7:d1:74:41:66:86:50:7c:d9:06:66:
         85:f0:c3:f1:37:ef:35:1f:e0:c3:68:aa:36:bc:bb:b7:b3:0b:
         a6:d1:2d:18:73:05:d0:cf:18:cd:12:2d:36:5d:6c:ca:9f:da:
         53:04:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:43 2025 by rpki-client